Home › Privacy policy
Privacy policy
What this website records, why, how long we keep it, and how to opt out of measurement.
Short version
We use Google Analytics 4 to understand how the site is used, and we only load it if you accept the cookie notice. You can decline and still use every page. We do not run advertising pixels, we do not sell data, and the only personal data we hold about a buyer is what the buyer sends us when they enquire.
1. Who we are
This site is operated by Pepteora, a wholesale supplier of cosmetic peptide raw materials based in Guangzhou, China. For the purposes of the EU GDPR and comparable laws we are the data controller for the personal data described here. Contact: info@pepteora.com.
2. What is recorded when you browse
- Google Analytics 4 — page views, approximate location derived from IP, device and browser type, and the site you arrived from. GA4 sets first-party cookies. It is loaded only after you click Accept in the cookie notice. If you decline, the script is never loaded.
- WhatsApp click events — if you click a WhatsApp button, we record which page you clicked from, the message that was pre-filled, and your IP country so we know which markets to answer in. This is recorded as a business enquiry signal, not advertising profiling.
- Server logs — standard technical request data (IP address, timestamp, URL, user agent) recorded by our hosting provider for security and abuse prevention.
3. What you send us
If you contact us by WhatsApp, email or the contact form, we keep your name or company, contact details, country and the products you asked about, so that we can quote and follow up. We keep enquiry records for up to 24 months after the last contact.
4. Why we are allowed to process it
- Consent (GDPR Art. 6(1)(a)) for Google Analytics. You can withdraw it at any time using the cookie settings.
- Legitimate interests (Art. 6(1)(f)) for security logs and for recording that a business enquiry was made.
- Contract and pre-contractual steps (Art. 6(1)(b)) for quotations and orders.
5. Who else sees it
- Cloudflare — hosting, CDN and server logs.
- Google — Analytics, only if you accept the cookie notice.
- Telegram — new WhatsApp clicks are forwarded to our own private channel as a sales notification.
We do not sell or rent personal data to anyone.
6. Your choices and rights
- Decline measurement. Use the button and choose Decline. Google Analytics is not loaded at all in that case.
- Access, correction, deletion, objection. Write to info@pepteora.com; we respond within 30 days.
- Complaint. If you are in the EU/EEA you can complain to your national data protection authority.
7. Security
The site is served over HTTPS. We collect the minimum needed to answer an enquiry, and we do not store payment card data — there is no cart and no online payment on this site.